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(54) LOG INFORMATION ANALYZER. ITS METHOD AND RECORDING MEDIUM 

(57)Abstract: f 
PROBLEM TO BE SOLVED: To provide a log information analyzer, its 
method and a recording medium capable of reducing time to be required 
for an analyzing work of log information, integrating pieces of log 
information with various data forms and properties of uneven distribution 
on a file system, extracting log information to indicate an abnormality 
which is not the known one and enabling a system manager to exactly 
grasp noticeable log information among a vast quantity of log information 
by characters. 

SOLUTION: Pieces of log information unevenly distributed in the log file 
are integrated on the basis of time information 1 7 by converting pieces 
of the log information recorded by various data forms into intermediate 
forms as multipurpose log formats. The log information to indicate the 
abnormality different from the known one is extracted by calculating 
appearance frequency 34 by word and appearance frequency 37 by 
phrase formed by linking two words. The time to be required for the 
analyzing work of the log Information is reduced since the log information ^ 
is combined with extracted feature information, defined as a graphic and 
offered to the system manager. 
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^^mmcr>M:^tsko:?'^m^i,zmx.uiotiimmmti 
#tf ^mtsfg^ MED ymmtdMS^^- h jsai-r ^ itrnw 

mimm.mmiz^ttii>m<otmMmi, msNim 
<Dy^--?'yh i,zm^^tifzm^(7)X^n'^i,z 1 mtw 

^$n./cRifS«7)i§^^^'5r< i: i:,^ts:SC¥f\tmJi^mz 

w<r>^^iM%cr>^mmzhhu^'mmL^M^Lxm7Fi 
mm&iii^^^tttz^mi}^m^<7)^p^izh ho^m 



a. 

[ii*fl8] ia«iBi^v^L3c7)v^-rix*H:ie«j<^c7 

(SS««9 ] 1 ^rv^L8<ov^r^^*H=IB8^<OD 

a;/'tf?SM«f^iatctj<.^r, ffie^¥StctJfti.wie 

[ 1 1 1 iS^Jl 1 9 ^-f ii*H^I5««0 
•/Tt. 

1 3 ] 1 2im<r)uymmm^-)im^z 

{mm 1 4 3 1 2im<r>u^m^m^-nm^z 

ifzii'ii^^^ixtzm^<^mi'y^j:< t i^^tsx^wm. 
%mmz^^.^rLhz.t^imit^ho^^mm\-}j 
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ill. fc 5:1fig t -r SIBIiiSE*. 

[ W«« 1 7 ] »*3S 1 5 ietg<oieii^*ict3v^-c . 

B?ffi«^X7^-yr-C'^^&n^^ftf8(±. fBEWStWfS 
[000 1] 

axx/Mimmzm-th. 

(0002] 

\,zmm%^ttz',tmn^^<^^^^''n 0 fzMz\t^ 

1000 3] L*>L. (i^cOD^'ffifgc^P^ff^ti:, 



[0004] $<5>lc, o:/«?8Jii5;»c^*^*L-CV^i, 

c^fflai{iBtfif<^^-'7- h'«iig<j^^s-*ijffl-r s t izx 

i 3 ^^5t»coP^•C'{±^v^p^5r^^-rD^^ffl^SS:ttaJ■r 
[000 5] u^mmi:Si:'^'>zX WiX'^^tzi^. 

XT-M.'smmt^x^i'Ziihm^^Mcr)^^^^'^'^*'^ 

[00061 CTxtf. ayfA-:^' • '>Xr-J>,^<r>^lE 
fiA^1^»-rSfiA«!»Ii^XxA (Intrusion Detectio 
n System : IDS) Xli. ^•rS^iEfSAcO>'N'^- 

»i. i^-rH>^^znm-h:ihijiX'^^j:\^h\^of^n 
[0007] 

[f6HB*>j|?i^t J: 0 t-fhmM\ ±a«Oj: 3 tc, (s!*<?) 

fg^fflsitciES-t ■& t iimbxmnx'h s k v ^ 3 
[0008] -ec-C', *%Hfli7)aa^«i. ±i2isiffiS:»^ 

=yX^j^'mMi]^:Sc¥izX^B^tcm.<r)u^^<r> 
[0009] 
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Si:, mimmmm,^^<zi*)m!i^ixrzuy'm 

[0010] it*JS2tciBI8$ti./>:5|B«<7)D2/1f fli»l*f 

[ 0 0 1 n m^m3\.ztm^fiti%m(r>u^'mi.im 

^'+«8«i, mmmmmz^ie.ixhm(n\imMj^m^ 
<r>m.^^-ri>mtfz\m-&^ixfzm^<nm^'y^£< 1 1 

[00121 m^m4i,zim^tLfz^^M<^^^'mmmm 

TFi^mi, mm^e^y^-'^'yhi,z^tk^tifzm^<7) 

[0013] |»*JI5t^lem$i^Jt»BB^0^:/«fS)B$f 
^ati , 1 =5rv ^ L 3 £7) V ^-rnmz v ^T , Mis* 

(Tim^mzhhm^i^tsrD^mmimiKLxm^hz 
[0014] m^r^e^zim^fifzwmuymmmi 

mWit, ii*3Il=5^v^L3cot,^-m*H^i5^^T, HuiS* 

[0015] m^r^i ^ztm^tttz^m<r>'aymmm 
Th^mi. mm^(r)m\m^i.z^m^Mz^mttm% 

[0016] wsL^&iiZfm^ixrz%^<7i^y^m^ 

SSti. iS*«l^:V■>L3c7)v^■ri^*HCt>V^T, HUie* 



[0017] ff«fl9 tcteiJSix/>:^HH<^a^^ffi$g)|?«f 
i|g<±, iS*IBl^:v^L8^0^,^■r^^*''^c^^v^T, HfrlBta 

tOSiSBtPBl i: -r C: A^'T'i^ S . 
[0018] »*Ji 1 0 tcieK$iTJtl^BB<^n^ffifBSf 

«f^a{±, fs^iii^v'>L9c7)»,^-m*H:t3v%T. iiffe 

[0019] if*il 1 1 tc|fie§ix/S3%Bfl(7)oj?'ti$gp 

^a{±, fi*:iai^v^t9<^v^-r<xM:fcv«T, mis 
iz-^ttLi>mM<7)X'^n<r>^^icMfciLfcmt-r^zt 

ij^X'th, 

[0020] 1 2 \,zW&^ixtzW^<7)nymm 

nit^isfliiw^io^*— -r-y hi,z^m^tifzm^(r)X^ 
h , Buieafflo^^f^Bicx-f '•/ rx'i^^^tifzmm^'p' 
^^■fs$ia5'vieii-r-&iafflai/ie»xf--yri:. frieiaffl 

ttj-rs^^sff^fittHiXT-'yri:, rniBWiStf^ifiaixx 

ftlc HtiiBP;rScoB*^Jff^^lc^M S tiJt ^SiJtOMMtc*^ 

[002 1 ] 1 3 tciB®$fL^c^BB<7)Oi?'«?fiM 

mumti. iS*3Sl 2CtJV%T. fnB!mSffi^l--&*ix 
■i.ii<^il531«JK«±, tfriB3fSso7 -y v ic^m^fi. 

< 1 1 2#ii*«3S^Lr{i}3S-r«,^i:^fflOT*i6S 

[0022] tmm 1 4 tcifl»$ix/v:i%Bflc7)Q:j^ffif#gp 
tff:S"&«i, W^Jfl 2tc;*5V>T. B>nB*^XT--yrT'* 

^< h h-ttsx^wmmmzm^^n^ z t t^x-t 

[0023] fB*li 1 5 tClBK^itTtf^BJcoteiM* 

^^^titz^ntr^^i^y*--^"/ viz'^ik^ittzm 
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^gtttU^T -y r-CtttaS a^mSii: MBit LXWi 

)iitc*^-ti.«^XT--yri: imtfci=ivmnm^i3^ 

[0024] liiRa 1 6 tCie»SfX7t5|H«Oiai*ISEf*: 
[00 26] 

»:tciaw&#Bgu-c#iiSfi«oj^!B&PseitciJiBB-r 

I., 

[ 0 0 2 7 ] 0 1 ti. ^^^BBcTJO^/fflfgtW^at^fflV^ 

SgT-a •/ ^' . 1 {i3is:^Bflwo ^^ttftUH^^^fe^Sr^JiS-r 
SJiJUlilSCPU (Central Processing Unit) , 2<±l'9 
gi?lHlS§yn-y:? 1 5cO|JJ^-f[:^-e^7)fliJ00Jiiat-'iJS^x 
-:5'*<^gS^$#l7teE^^^tliL#fflieig^BROM (Read 0 
nly Memory) , 3(iCPU 1 Srii^tfi— • 

tiJiaRAM (Random Access Memory) . 4{i:CPU 1 

B^^S^gP. 6tio^1t$B»;W:6^5:llfi=-r-5.3ti^<^ 
n>'tfi-^' • yu^yJ^ttzMf—^m'kimLfz^ 
ytrj.-^'S!;?k5X0nrtE^CD-ROM (Compact Disc 
- Read Only memory) «<?)8K3Bportt^:ie»iSEf4cS-t: -y 

h-ri.ieiii«{*:gB, sMu-fmnmrn^ixtzui^yT 

-f/Ko^rtpgKJf^S) s 9<±o^7^r;U8A>4,m 

g) , 7\iayyr^)V&tTSm^yyr^>V9tmi 
a56 ^fe«iE^S7^i:«!^$itAaJ:*3<^S0ffllS'ff 3 



^1 1 i:fi|ggSAA:>3«iJP^5rfT3A:b$iJiJPSI5. 1 2J± 
^-•yhV-7 (^0^) $r^LTi'hgP£7)rj>-h'i-^lf 

Ul, ROM2. RAM3. WSl^UA^ Aaj^J$"Jfa? 

35 5 . A:^3»jffliai5 1 0 axx/mmwim 1 2 ^^^-rs 

[0028] ifW^m^-fmmm^:H^imy-th^ 
■ Tzt^yj^axx/f-'^'mmuw^eiiz 
^r y h § ixf^ c D - R o wm<r>t^^mw^zsm^-^x a 

<Ztti^X'^t. CD-ROMttziiJ<'EV ■ 

ticttXx-^'Ji, Xlii:hUmm5^^LXy<^l 4?:m 
ORAMS-^o-HSixS. CPU ItiRAMSF^tCio 

i: J: 0 . A:'jSf^a5 1 1 i}^i^X:hmmB lOiit-LX 

mmcr>x:ni}^n^j:±>ti, mmm?nU4i,zx:iymmfm:fj 

[0029] ^<rmm 1 . 122 (i. *j^BBcO^)5feOJg 

■r. OT. 7D-f-v — b<^#X7^-yr5:llffiSr#,^L 
■^j:ifit:>m^n-th. m2{,z^^1X^ii0^z. i-ro^yr 
jU8i)^i^t3i^mm^X:hT^ {X'r-yy'S 102) , 

[0030] mz. Ltzu^^im^'im<7)imtjy 
y*-'7-/hi.z^m-rh c^y'-yys 104. vmoy 

[ 0 0 3 1 ] 03{i:, ^wmmM<r>mm i tcfe^tsifl. 

fflD^7:r— v>y hSr^f. ia3lc:tJV'>T, ^t^16{± 
iafflD:/7:j---7-y h<7)^#:5:S^L, 1 7{i:WScOB#^l 

^■tt.^^^'^we.ffyx^nx'h^:^ -y-fe-i^'ts^-c-ais. 
[ 0 0 3 2 ] 04 M^^mn^mcrmm i t^isfts o^?^ 

L, 05 (A) , (B) {i:3^%BB^7)||]5£<7)Jg® Itciift 
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c 0 0 3 3 ] 04 tcs^sixi. xoiz. trmmm^ 1 1 
02) . mums (A) i,z9r:^tihJ:oi,z, mmmm 

1 7 fc -r I. «?Si& a ;^W?S A C C T 2 9 AtOI^^J 2 3 
(0 3 : 17: 15) tm^-Th. 

[ 0 0 3 4 ] . ^^ixf:im\2 3 i:ffiM<r>mmt 
mtli 197 0^1^109:0 Oi)^(>com 

m^m mM<of^Mm^) ^^^m-rs (x^ /rs 2 o 

bi)<-Ctfh. ZcomM. mums (A) iz^.^ixhX 
0 ic, iSf^Mfg 1 7(7)ffi (S'fg^ix/i^S'J) {5. '■95 
26 2 586 5 J i:S^$iXl). 
[0035] oi!^ffil8*»^.. ^ /P^' U i^^'tTt 

L , m^<r>X'm^^-th ^ i: J: 0 ^ ^^«f8 1 

(18) Sr^^f* (;?.7"yrS20 6) . :J'^^fflf?S2 

(19) i^mkl.zi^fSL'th ( X-r -yrs 2 0 8 ) . fi^J;t 
(fll5 (A) tc*$ixSJ:3t:, «^i:^l.tilfiS:o:;^ 
ff?gACCT2 9 A<?5:St^l Typwh i chj 2 1 i: 

C:cO:S:^!?il2 1 2:-?-c?)t*:J'^''ffl?fi2 (19) 
t\.X^m-h. ^-/mSil (18) t;JiD^t»?fiAC 
CT2 8C^I^<XT»'^=a:»'''W#g« mLM^C^'^W^^ 

o. CO. j P J ) Srffl<'^?.C:f: tX'^ 
[00361 a;/ffl$g*»'^.ftWfC'iJSi:'Sr4W 

-i^-'tf?82 0Sr#^-r.S (x-r'/rS2 1 0) . fifJi-tf 
05 (A) \,Z7ri^tthXol,Z. jm^z&mt^J:hm^i: 
n^^ffi?8AC CT 2 9 A<ryX'^ r r o o t ? j 2 2 
fX^3\ ro. 05 0.01 540.00j24i: 

0itl^:X^'\ ""root ? 0.05 0.01 5 
40. OOj S:^-y-fe-i^'ffl$B2 0fcLTf^fi&-ri.. 
[0 0 3 7] 05 (B) (±flil(50^Ma:^-r. 05 
(B) {c^$ix-i.J;aic, B#^Jffl$gl7a-r&«?fi$rD 
^^'tS?BSYSLOG2 9Bc^ffifl3J2 5 (Oct25 1 
0:41:25) bW:^-t^. i^^$fX7tB#^J2 5 

5(B) IC^SixSidtC. I«l0lffi$fil 7<7)mi '"9 3 
39 1 286 5 (8-^) J tiS^-ri). 
[0 0 38] i^^mmi ( 1 8) ti, 05 (B) lC7r:S 
ixS J; afc:a^i:=Srl.tf?g^o^«?SSYSLOG2 9 
B<0:5:^J Tf oo. CO. j pj 2 6i:^^L, ^co 
:S:^l2 6Sr-etfO*^:7^^ffl|gl (18) tLxi^m- 
h. ^ym^2 ( 1 9) 05 (B) iZ^ik^tlhXd 
izm^b^i>mmi:a^fmSYSLOG29BC0X^ 
?ijrin. telnetdj 2 7i:^^L, Z<7)X'^i 

2 7^-e<7)it^^ffi«2 (19) bLXi^^i-h, 

[0 0 3 9] ;<"/4r-i^W«2 0»i, 05 (B) iZ^^ 



tii^olz. mmz<&Wb^j:^mmo:/mmSYSl. 
OG2 9 B(50:SC^'J c o n n e c t from cr 
ack. comj 28i:^L. Z<^X^28i:^<^ 
ti^ •/-fe-vffi?82 0 b t-C^Bitf ^. 
[0040] ±M<r>X 0 tc. D^-tt^g^riflfflDr/^ 

■ i^x-rA4'C«^£LTV^/iD2/'tSf82r^33Mf«l 7 5: 
[004 1 1 02<5O7D-f-A'- ht-^O, Xy'-yyS 

io4fc:gEv^T. mffi^srttai-ri. (itmw$sa{ij#^ 
x-f-7rsio6) . #fati?g{±, mM^yy*- 
•7-y v\.z^m^ixtzmmmi i . ^ym i ( i 

8 ) . ^i/m&2 (19) iJtti^ y-b-vlffS ( 2 

0) ift^^{4a^ffi?g*>'^ttaJ-r2>'t*?St'a^2>. f^*^ 

ISiflgtJi; , #fif B#ra ^^/^ 0 <73 o ^tf $gco^ , ^ 
1(18) #cO«»SiJc7)D^^ffi^<oSc, ^ y-fe-i^flf^ 

2 0<0*^Jc?Dft$iJtt4^ >y-fe->''ffi?82 Otc-S-iix 

[0042] 06{i, ^^^ncrmMe^Ml l>ziilf?>;>( 

.y^-i;^m2 0^Z'^tti6mmcr)iiimm&?:^>i^^:fj 
ffi$rittBJ-r5. m6ltZ^^iti>Xdl,z^ a^^s^i •yk--=/ 

3 0 LTT^df X h -^'^t: J: Sit^aai 3 3 ?r 

ff^K 1 mwrnkxtam-t^mmmmmm!^ 34^2 
Ltaisit- s ~#iia^^s'jm3s«jK3 7 1 
^tti, ^ i: ij^x'^ h . t#^>*T.Jt*a}3'ims3 4 b-sm 

aiS*JS(lttJ3S®S3 7i:t4, «-^06tC*$ixS<}: ^ 

[0043] mui. miJi^^m^ 3 4 \,zyr^^ixh x 

9*::. *S Tf r-omj {4o^^>>7-b-£;'3 0+tC6[ll 
W4T{1131 LXa 0 , — Tkyotoj 35<i 
o^^.yH,_i/3 04>lCllHl«4T-aiaL. ^ii^se 
n d a i J 3 6J4n^> /-b-i^'S 04'Cc: 1 ^smx^ 

mLx\.^h. -mm^n^^^m^^'7<'Zm^ixhx 

die. ~#IS c o n n e c t f r o m j {4U:/;>< •/ 
^-'J30^l,ZA.'\s\%^LXii*) , —U. "^iS^f r 
om kyotoj 3 8{4«y-fe-i^'3 Qtf t= 1 lUmM-C' 
aiSt. mi§rfi-om sendaij 3 9«4o^.X 
.yfe-i''3 0 4'(clini^iT'ttl3StTV%i.. Cico^*. 

*as'iajiK^3 4 ttjv^tst ai3^^<offiv%ms 

Tky o t o J 3 5Jo it/^li r s e nd a i J 3 6 

b. -*iSJ^^m3SMS3 7tc^Jv^Tftt^^l^s 

<7)ffiV^Z.#ii fconnect fromj HXXZ—M- 
lirfrom kyotoj 38t $:#tf v -fe— 

->'3 1 3 2 bifm&^m-r^^^^ -y^-i^x'hhz. 

bt:Vmth:ib1fX'^i,. 

[0044] — ^^ro^^^ -y-t— v^t4a*«#<^$ 
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3 4 fc Zm^iS*S^S']ai31^JK3 7 fc $r*J^S ^ i 
[0045] (126070-f-A— hl-MO. :^r-y7*S 

loeic^v^-c. uf^mmtrwmLLxmn^^ 

>^r«yrs 10 8). **e^ic{±, 
fgl ( 18) tPSiJc7)o^^ffl«c^^$:^-rSC:i:tT'§ 

c 0 0 4 6 ] 07 {±, :^%m<r>mMcr)mm i icfcits o 

litc;Jb*»'?>T-^^?ixTV>^. 1?^4 l{i:^iaLTV^ 

^n^^corj'^if^fi 1(18) m<om^i9f^-t^y^rm 

l(iI17•Cli:BB^$i^■tv^^|,^*^, fi±gP*««feT. W 

cKofe^ttti, ^aif ■5.fl!!<ois«{4 2^^c^5^t^>«■ 
I) ^ i: ^?F:^tzlsbcr)mmX'h h . ±^C0fe^tt{Sfi?il*W 

[004 7] mi\zii\^x. '^Ai\tu-:/Wk(rm.<r) 
wm.'hh, B^8>j«sffl«4 2<i, ^mmj\^\.mB 

lizm^hfzMWf-A 2 a i:^SC^*»il>t BIS^ 4 2 b 

2cS::fi■t•CV^i.. b;^ h^<7A«^4 2 ct±B#iattli 
tC±*»^>T^^rail-e«lia4 2e. 42fW^I*^*l.-C 
US. Cti^>«7)^IS4 2ei:4 2f i:<7)ra(il2B#S^ 
cOB^HraPBSr^LTV^I.. ?f-^4 5<?Dnf*Itc^S*tl> t 

ffi^*<!Ea$iX7t.li:5:^Lf US, jSfS^^42atB 
*S^4 2bi:^fflv^5^t:^^J:>9. ^J^4 2clca^S 



^4 2 d{±aaD^LOG*<ias§tT.fe^^J**Ltu 

[0 048] ll7K:fcUT, ??#4 3{±O^WI8c7):S;^ 

^•rST'^h^'f >'^^^1*T'?)S. T'^h^^y^ 
^l^lCOUT«it*^l>. ^?-t4 4{±r'>h7-f 
^i^4 3lCl3ttl)a@Di^LOGSr#tfaS^^4 6rt 

^ffii^T'S) ?..aBa:/LOGSr B#^J1f $B^^fSJ*4 2 
rtfv'>xi|£r)A:»3tif^gi5 1 1 J: 0 :7 y v i^mLXM 
SJ-rSk. ^gO:/LOG?:4"ll^i:Lr^SW±fiOH'jf* 
<?5«lS?r T^Vy-i vm^WH 4 3 S ^ i 

^i.. T'>h7'f>-a^Sl«4 3 4'O^aMlS4 6<0l» 

[0049] 08 (A). (B) \t^w^cr>mi><&(r)mB. 
1 tcfctts T'^vy^ ym^'s&^wn-th .msxm 

'■m-th, 08 (A) tCt>V%T, 1?-§-5 0t±O:5^p<>y-fe 
->''«^l*4 4tcfc{t.&a^^^ -x-fe-i^Sr— SSKOai 
L-JtfccO-CfcO, 5 0a^rV^L5 0d(i«-o^;<-y-b- 
i^'^^-r. ?$#5 U±O:/;< y-b->''5 0*<0=S-o^^^ 

hmhi^x^^LtiT^v^^ -y^x-hh . r^hy 

-f y^5 1 a^V^L 5 1 dCD^ma^y^ •y-fe-i^'5 
0 a^V^L5 0 dl::^tJEL-ru|,. Ci<r>T^hy^>^ 
S^5 1 a^(0*$tZja;t-C, :5'2?'S«'M*««4 1 IZtf: 
^iihu^roi^^'m-i. (18) ^c7)^tcC-b/v:fe^ 
(t^$^>l=M-r^:i:*^T-^.|.. 08 (A) T-(ife^tti7) 

[00 50] 08 (B) tCfcOT. IJ^5 2*io^^1S« 

(DWMit^^-<^-^i^4: Oi)^^T'y h y^ y^^W^4 3 
t XJ^ji -y ■t-i^'^^^^4 4 1 SrIXO tB L^^c^Sr^ 

-r. r'>h7^y«*#-iS4 3tc*jJt-s.aaD:?^LOG 

tUS. jS»tC, o^p< y-fe— i^'*^Mi«4 4l*J<7)MJ*5 
4l*lt:«*$tl.-CV%S:fc^ft$8**, aEaffii^4 6lcniJ^ 
^^{cti#ifkS^i.fe00i:'5ro-C*7P$ti-C 

[0051] 09{i, ^w^nnwnBmi ^-^3^tsp 

ym^<^^^<tm^<^i&(omi:^-t, 09-c07ki5n:, 

2,. 09^^^3V^■r, W-f-7 K 7 2*Jj:t/7 3<i>-yfe 

-v'««2 0fc:#*<xS#ii<^ai^^ (06#B3) i,z 

mtx^^iitxwik^tifzo^mmx'fih , 09T'(i 
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(00521 JjLhi 0 , m&(r>mm l iixtf . S'**^ 

7 SrSJit LT^-^t-S <! t I. , miiS'Jai^^ 
3 4 fc -#ll3I^'S3S'Jai^««3 7 $r5Ri^l> C t ^ZX 

mizm^^^^i^^^^^^^^^x'^^ v-xt^a^ 

^ ti^mw^sMiizim-r^ z t t^x^ h . 

c 0 0 5 3 ] m&(r>mm2 . a i o{±. ^%m<^mm<7i 

mi ox'm9 t^\:^n-^-inLtimmii^ti><^^^ 
tmbmmi'm'rh. mioi,zi3\,^x. w^7 0iia^ 

;< ■•/ -fe - -Jm^mi^ 4 4<p(7)U Xtf fS<?5^-ft;*7p . 7 
1 ^V^ L 7 6 li£^XxAl=a#^*»^>^§^S^^Jt>'^*:S'- 

•CtttH^^iJt^-V-K, 7 7>5rV->L8 2(iJiac?)#i§ 

comiKMS (ia6#Bg) comvuzx o^^<7>mmfHcotii 

HI OX'lim^^tlX\'^^^^i}K ^--7-^7 1^ 
v ^ L 7 6 {±*v ^WJftfeS: *-r €. J: 3 (c^^-T C *>'T' 

df_V_H7 7:5r<'^L8 2*i«v»«Sf&$:^r-rSJ: 
d ZttfiX'^6. mo T'tife^lttfO^i^ 0 

Jf-'7-b'7 l^v^L7 6J±£fH^SrA^^-ttl>J:3 
(cS^^n, Jf— '7-K7 7^v%U±^#HSSr*^^-ti:i. 

^■&wrx'h*). fl!i«offim£7)-fe-}j-tt. 

[0054] tLh J: •) , USS^OJg® 2 ic J:a(f , 
WJSJfiffi%cr>^^X'hhij<^iL Lt:Jg«$ix^v:^-'7 

h^E-th^^^ymsL^^s^mziimth^itii^x^ 
h. 



Wt±isi t i,«o^^K-r^ca^>IJiBH«i*B&-r . Hi 1 1-*^ 
v^T. ??:-§-8 5{i7-f;U^"J>':/50!a5rffOBiI<?)ffiBS. 
8 6 \m^^ttf::9^'S^n 1(18) l?<7)a^-C'7 ^ /l- 
rJ'UV^/arffofvi^SiOffiffi, 8 7{±t§^$ix/c^'^tf 
$S 1 (18) «oai3l^T'7 -f 'J y^'zr^f o^^vT^* 
OBffiTftS. ffiffi8 6fc^$<xl>J:oC. Si'^f^l 
(18) c7)8l«<7>ti^«i;^'^aS'J^«lS4 1 ^(T)^^ 
(7)^^8 8 ^■7'7;?.^<?)A:']ji#gp 1 1 1'^ 'J y^mi^ 

xm>R-th ^ i: ic i 0 ti^-r & C fc i. . 0 1 1 

^yS^m (18)i:UTrinetdj 
^^7t:CalS:^tTV^S. ffiM8 6lc^§ti.^ i die, i^':?^ 
ffi^l (1 8) «0a3l^fi0tg^«±^i?^')«*«1^4 
1 ^<rm'&<7W&& 9 ;:^^<^)A*l*f^S5 1 1 T K 

7 >y LTSHR-r s ^ fc i 0 fiffi-r z t a^x^ 

[0056] ULhJ: 0 , IBI£<7)J^®3tc iixtf, "^'^^ 

m<r>x-hWff^ 1 1 x^^^mw 1(18) ^commtfz 

iti'^mmi ( 1 8) «0ai3^JKS:SltR-rS.Ii:lcJ: 

[0057] m&<r>mm4 . 12 1 2 :^wnc^mmcr> 
i:7p-t. 01 2X'm9 bmtn^i:nvtzmmiimti> 

0{47'f;W:J"J>'^^«!:a5:ffomriOffl®, 9 2. 9 4«i: 
7t^a«oa®t'ftl>. BB9 2{c^SfL& J: otc, -X y 
-i'WiaM^g 1 ^«ltl!Lh-C"?'>X^cr)A:'3l*f^a51 1 

i:mmLx:&^i>znm^-±hzkizx ^m^^hzti^^ 
mfm9 1 J: o*v'>;'< -/-^-i^mmta^ti^zmir^t 

TV^S. Hn9 4T*J±, aa«i^9 64'T'^ y-fe-i^'ft 
Rlffl^9 5 J: Offlv^^ 'yb-i^kt^mtii^titimiTnL 

[0058] uLhi 0 , mm<mmA tc i , r*!^ h 

7^ ya^^lS4 3l*I-C^ •y-fe->'':Rraffill9 1 

±x^^y^m<r>x-nm^ui i$rfiJfflL-c:feti:^i&s 

fioZtifX^i>. 

[0059] ^<r>mm 5 . 0 1 3 {4 , *%BB<7)»S<7) 
}gSI5lci5ttSiS^S«t=J:l'7 -f /UiJ' U y^cOfiaiS:^ 
-r. 01 3T-09i;|5lt.^?-^5:#L^c<lp;r«4|5ll:i>«7)?r 

^•r/cJ<^iKBflj4*B&-r'5. 01 3ctjv>t:. vmioo 

iiy^)U^ V V:/5!lS$:^T3M<^Bffi, 1 0 2«^^$ 

i,. H®1 0 0{4, itanT'LOGSr+'Di: L-^cMf^ 
^m^^:T^hy^ vm^W&A 3f*g<50ffl« 1 0 1 tc* 
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1 1 X'i^ 'J y i^m-fh ^ t tCct 0 , ®B 1 0 
'OVvAy^i^A 3l*]C0ffl^l 0 5 ) $r*^-ri>C:i:** 

h. 

(0060] liLh J; 0 . mmcr>mm5izxrni. mnm 
w^mm4 2rt£7)iiaa^''LOGj; *)mmm±x'±t 

^«T<7)(agS: v'>;^.^A:^3t«#a5 1 1 1'^' U •/ 

^?:m7^-ri>zti)<x'^h. 
[00611 mm<mme . a 1 4{i, :^^m<nmm<o 

0 1 4 T-iag i:l5l UJtfliRlr{±|5] t tcoSr^K-r 

/ii6iMBfl{i^B&-ri.. lll4^Ct^V^T, »^l 1 0<±7 

m^x-y -i Jills' ^yyin-ofzmmcrimmx'h^. wm 

10 0 T-OTicJf #11 r z e t a k a J SrV^X^cOA^J 
Sf^SPl lt'K7-/^^^UT3!S?-^«.C:i:tc:J:'9, Wffi 
1 1 2 tC^^iX^ J: a lC*i§ r z e t a k a J ^^tsci 

[0062] J2Lh J: "9 , IIMcOJgM6 ifrti', mmco 

[00633 mm<7)mm7 . ±mLti^mm<r>mmcom. 

mmmmm<7)c p u i mi$mi^m e miz-t >y n $ tttz 
mfsmm^j:mmmzmm$ttfc^yii ■ ro^ 

^Jx^'^^lR>0^n-t^CitiZj:-yXi>. ^^BHcOBW 
^mm^tlhZtliWotX'i>^j:\>\ Zff^^-t. ±^cr> 

ztiz^j:*), ^<7)^yyi:x.-^ ■ ro^^A^iefiL/:: 

tmmwi.i^w^n^v^m-^^tf.zi'sh. nvf^.-^ 
• ru^yM.^imLtzimmii^tLx\t. mm, c 

D-ROM. MO, jfer^^^J?, 7ay 

tf- (Siimg) ir-iX-^, i'N-H'T'fX^. ROM^ 

[0064] liLhi ») , IIM£0}^.®7t= ititf , 

7 A s: leii \^tzimmf-^^w^f^<r>u^mmm^mz 
s^j&t , -e<^D^^fflfgM*f^aioc p u 1 tmmk'mz 



I.. 

(00651 

mi§is^'&]siiajJS!«K 3 7 1 ^*a6 , o ^fflfgk ^ 
mi,zm^t^:i tizx*). o^mm<omvifm(,z^-th 

[ia®tfOlS*=5:iMBH] 

[HI] *3%Bflcooi/+f$g»tff^Et::fflv^t,iil.3>' 

[021 ^^Bjc^jficojigsi 1 tcfctt a n ^fmmm 

^r^^-^t" 7 o— ?- A' — h T'S> I) , 
[El 3 1 *%BflcOSI5fiOje® 1 tcfcftSiafflD;/7 * 

[ 04 ] *f6s^co||S6<7)Jg© I (t'S n ^^ffl ?g*»<?> 

[051 2|s:fM3i55||Jfe<OJB.«lC*J»tSn^flf?8A»^> 

[061 :^^m<^m&<!Omm l tClStt S ^ y-t- i^tt 
fg2 0 tc-^ tix^miS£0til31«Jg?r«y)S**?riKBB-r 

hmx'hh . 

(07] 2ts:f6Bfl<7)iis6^om® 1 izmirh o ^^wfgom 

[08 1 :^^m<omm<7>mm i tctjtts r h ^ -y 

m^mz: mm-t^mx-h h , 

[09] y!f.Wn<r>mM<^M 1 (ctJtt •& d :?'ti?S<0^ 

[010] ^^m<7)mM<^mm 2 (c*3(ti> o^^wfg^o 

[011] :^^m(7)mm(^mm 3 ctstt ■& :5' ^^imi>z 
Xhy^fUi^v yyffim^^^MX'h h . 

[012] 2|s:^H^cOllM<50m^4{Cfc(t?)^ y-fe— i^' 

[013] zi^Wn^^'nmM5\,zii\fh ^^tc J: 
S 7 -f l» >:?'c;)fiai$:7Kt-0T'S>.S . 

[014] 2[!:|6BH<;O|IM<50Jg® 6 {C±>ftl)mi§tC i 2> 
7 )V9 V yy<7)mi:7jkrrmX't> h . 

1 CPU, 2 ROM, 3 RAM, 4 Hfil 
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1 0 x:hf^mm. 1 1 x^^if^, 1 2 aft 

13^-/hV-i^. 14 /<X^ 16 
iafflD^7*--7 y h«0^«c, 17^lfiHf$8. 18 
rJ'^tffgK 19 ;5'i?''tf?fi2, 2 0 ;<yt- 
21,22. 23, 24. 25, 26, 27 



:*:^?|J, 2 9 A, 2 9Ba^mSi. 3 0 a^^^ 
•y-fe— v''. 3 1. 3 2 n^^;<v-fe-£/\ 3 3 7"^ 
Xh-7^-y/l,zi:mnt^tii. 3 4 ^SS'iai^ 
3 5. 3 6*iS, 3 7 

3 8. 3 9 -mil. 4 1 ^'^^♦S^i^tJt 

(±^^^««']«*ffl«{, 4 2 mi^mmmmttzim 
mmmm^mm, 42a iit&i^. 42b am 

GA<taili$fL/cB#^J, 42e, 42f «t^, 43 
T^yhy-^ ym^mM. 4 4 o^;< -/-fe-i^'^^ 
Ji. 45. 49 46, 93. 96 iiaffli^. 

5 0 a^;< /4r— xCO— SS. 5 0a, 50b. 5 
Oc. 5 0d Q^^;<y-fe-i^, 51. 51a. 51 



b T^hy-fy^. 5 2 T^yhy-fyWr^l^ 

4 3 toy ^-y ■^-i^mkmm4 4 1 Srix o aj ttzm 

7ji^ 5 4 7 1. 7 2.73 o^'ltfg, 

7 0 o^^if^cO^g^'fta^, 7 1, 72, 7 3. 7 
4. 7 5, 7 6 >'^•;5'-y-7•y^>:^''ffl^OS:*?"J5rfflV^ 
rtttt5$iXJt^-V-H, 77. 78. 79, 80. 

8 1. 8 2 m^^tlti^-V-}^. 85. 90. 1 

0 0. 110 y ^ii'i:"jyy^Mi:'ifom<oMS. 
8 6 t^^^tit:^ a^mm 1(18) ^Si)S-C7 
rJ'yy^^^-tfoJt^miOBB, 8 7 ^^^titz^y 

mwti (18) (Timmm^r-y ■< y >-^?rif -^Tt^ 

*C7)PB. 9 1.95 ;< •/•fe— i^'^ftrailMl, 9 
2, 9 4 *i«$fX7tiaffi<!0^-i'-fe->''«T7-f;l/^"J 
>'^5rff-:>Jt^*<^HM, 1 0 2 t&S$i^'^^B#ra^ 
•C-7-fyl'^'yi':;''2rff-?^v:^««oaDB, 10 1, 105 
mL. 1 1 2 f^^^tUaSmVy 4 y >'^S: 



[02] 



15 



1 


2 


3 








CPU 




ROM 




RAM 




'SI 02 



2) ^^rgqa^Sk 



3) X*f-J:^P^1»«05*q% 

4) ^-ygja>p^ag^ 



-S106 



-SI08 
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[03] 



[134] 



.16 



B$«i ^<fmm >v-b-i? 

/ / / 1 



17 



18 



19 



20 



17:1970^1 ^ 1 B9:00]bN^<Oliia&& 
20: ffi£(OB«g V ^^6in<0eS(0>t?91 



^ im« ^ r « m « ^ p ^rtt «B A> ei 
1 -^»sr*. 



-^202 



(fflilli 1 9 7 Ofiflfl 1 B9 



o o) 



^4 



'S204 



-S206 



-S208 



'S210 



[05] 



(A) 



(B) 



29A 



^ypuhich^^root ?^ 03:17:44 p3:17:1S^ 0.05 0.01 540.00^ 



21 



T 
22 



23 



952625865 fco. cso. jp ypwtiich 



24 

root?0. OS 0. 01 540. 00 



17 



18 



T 

19 



29B 



I SYSLOe l ^Oot 25 10:41:25 f 00. CO. jp^ in. telnatd I220n: connect from crack. net 



25 



22 



933912865 foe. co. Jp in.telnotd 



27 

connect f rotn crack, coo 



17 



4i^««2 



18 



'T- 
IS 



20 
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[He] 



30 



connect f ron tokyo 
comwct from tokyo 
o*! cornnct f rosi osaka 
^9 ^rofusod from Kyoto 
-v^refused from sendali 
contieot from osatia 



33 



34 

/ 



6 from 
4 connect 
2 tokyo 
2 Osaka 

refused 
1A kyoto- 



35 



connect 
refused 
from tokyo 
from Osaka 
from kyoto--3B 

from 6ondai-'33 



[07] 



42e^42f 



46 




ThMe directories ware unable to ba Boved properly 
installation proceee. Check for any usor-oodified filofi 
delete the directorieo. 
Ai«r/lnolude/Vk.O 
(atart.8top}(iidi entered 
zetaka: locin 
zetaka: logout 
zetdia: login 
zetaka: loeout 
zetaka: login 

sueceedod: ttyq4 changlne fron zataka to 

Wetaka! logout 

Zetaka logInC 



BsklkoCnapolI.VDgue. lB.usae& Jp ec ffiAlko:cnd:'/U(r 

oekikaenapolKvogueL i8.ueaaa Jp as omkiko:aDd=' ^ar 

osfclkofrnpol i. vogue, is. ueaB0.Jp as aakikorcnxtsyusr 

oaKikoShapoli. vogue, ia.ueaso.jp as giakiko:oiid='/uar 

inkikoCnapolt. vogue. is.U0aac jp as oakikolonis' /uar 

tcsklkoenapolLvogue. Ia.uee.8& Jp as fflakiko:oT)d=' Mr 

sakiko&upoli.vocua. la.uBO.aa Jp as naklkoron^/uar 



oiaklkaetapoll.voeua. Iruaaaajp at ukikoicDd:^ /bar 
1- r56?1^g01 f49Qn k aeaa ion 



— 40 



41- 
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50 



50a- -^t^Aecf ItCQ^I^IlIwi 
50d' -iiujsvfimiid: 





(B) 



hit8»b rescia. vogua. is.uec. ec. Jp as Ktta| , 

Ktt^KW ?^pol i. vogue, ia. uec. ac. jp a s zetakal 
7^pQl i. vosue . i».uec. ac.jp as zetaka| 
zetaka: lofoutj 
zetaka: loKirT 
zetaka: loeout) 
zetaka: loKinT 

zetaka: logout) 54 
zetaka: login[_ 

surinaSbrescia. vogue. 15.ueo.Bo.jp aa surina 
cynthleOtorlno. vogue. I s. ueo. ao. jD as oynthi 



£1 



zetaka :nto£outf 
zetaka: loiii t 
oynth i agtorino. vome. iB.ueo.B O. JP aa cyntniai 
no rw ofe f I lo syatonia In wtabl 
zetaka: logout] 

zetaka: loginC 

surinB§brescia. vogue, is.ueaao. jp aa surina 
aur i na€br eso I a . vogue, i a. ueo. ac. jp aa aur i na 
zetaka: logout 




"44 



78 



79 



tEllO] 



70 




NFS open 

zetaka: logout 
zetaka tpoginr 



no m efs file systens in mtab 
connect i o n frora c ag ( 1 al i. vogue, ta. uecac. jp 



conneotion from cag I ial i. vogue, ra. ueo.ac. jp 
FTP LOGIN FROM cagi iaii, vogue, is.uec. ac. jp as zetak 
conneotion from cagllall. vogue, l8.uec.ac. Jp 
FTP LOGI N FROM cagi iaii. vogue, i8.uec.ao.jp as zetak 
ARPigct MAC address on ec for BCA^ 



connection from cag l lal i. vog ua i8.uec.8c.jp 
_FTP LOSIN ^H^ FROM caglialt 
ittyc|2 changl ng/f rco zetaka to 
succee<ied:ttyq2 changing frorn zetaka, 
t-[4884]^901 (4901) X passion 




81 82 



^ 44 



.74 



71. 72. 73. 74. 75, 76:/<^— W * y ttm ^ttfe^*?— K 

77. 78. 79. 80. 81 . 82 : nOMf IC * 9 tttil S K 



[139] 



71 




nishi@bresctB.vogue.i8.uec.ao.jp as nishi 
nichiiaiena. vogue, is.uac.sc.jp aa niahi 
kita|br MC i a. vonie. i s. uec. ac. jp as ki ta 

?§napolI. vogue, i s. ueo. as. Jp as zetaka 
I i . vogue. Is. uaa ao. jp sa zetdta 
: loeout 
zetaka: login 
zetaka: logout 
zetaka: login 
zetaka: logout 
zstoka: login 

sur ina§breaola. vogue, is. ueo. so. jp as surins 
jcynth I ajgtor i n o. vogue, is. ueo. ao. Jp e s cvntfiia 



zetaka: login 

cynthiaitorino. vogue, is. ueo. ao. jo as oynthia 
no rw afa file syetaais in mtab 
zetaka: io^ut 
zetaka: login 

8urlna6bresola. vogue, laueo. ao. Jp aa surina 
surlnafibresoia. vogua. i& ueo. aa Jp as aurina 
zetaka: logout 



ogin 



co*= ah - 



72 
'73 



^^^^^^^^^^^ueSTao. Jp as aurina 
1-f3ga71-4a01 f<aon x ama ion 



44 
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[01 1 ] 



[HI 3] 




ntaks: togin 
zetcka: locln 

juvmttit. voQi*- i«- Lca ca. jp rac^MStMl boot ft I o^GDRC 
juvtntus. vague. {•.wo.ca.Jp rvoumtvd boot fl liyfCD RC 
reply. to JuMntna. vo«u«. la.uao.<w. Jptboot fils/ClMM 

- ■ oa. J p.boot f i laAaWW 

— ilealon 




nluicn 

as gumtroncts'axac 
e* cuect:axt=*aKse 



[HI 2] 



41 



teraStSTTM uBi'tS'tSitt «rt tea 

t«: «a WUantlsctlia far < — 

lerClMbti M 



i«c « k» ^-pa 



T 

90 




tar n* k*T ii N i* . 
tw: tanilw W Ml n* kM. 
he: ta ^v^M nwlsto. 
Is: •wtxw W Mt lit M. 

t» kq anntlM aM>ta 
be: tearnks W Ht Hi Kn. 
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cm 4 ] 




(72)%BB# mm P^—M^) 5B042 MAOS MAU MAH MCIS MC23 

n^lWmm-^n^mLrmiA^ l ^ MC28 MC35 MC40 NN04 NN09 



